{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-001882.html",
  "dc:date": "2024-07-11T14:27+09:00",
  "dcterms:issued": "2024-02-07T14:25+09:00",
  "dcterms:modified": "2024-07-11T14:27+09:00",
  "description": "Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain a local file inclusion vulnerability (CWE-22, CVE-2023-7077).\r\n\r\nTunahan TEKEO\u0026#286;LU of Senior Cyber Security Consultant reported this vulnerability to Sharp NEC Display Solutions, Ltd. and coordinated. Sharp NEC Display Solutions, Ltd. reported this case to JPCERT/CC to notify users of the solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-001882.html",
  "sec:cpe": {
    "#text": "cpe:/a:sharp-nec-displays:multiple_product",
    "@product": "(Multiple Product)",
    "@vendor": "Sharp NEC Display Solutions, Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-001882",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU97836276/index.html",
      "@id": "JVNVU#97836276",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-7077",
      "@id": "CVE-2023-7077",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-7077",
      "@id": "CVE-2023-7077",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-22",
      "@title": "Path Traversal(CWE-22)"
    }
  ],
  "title": "Sharp NEC Display Solutions\u0027 public displays vulnerable to local file inclusion"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-009396.html",
  "dc:date": "2024-09-30T12:46+09:00",
  "dcterms:issued": "2024-09-30T12:46+09:00",
  "dcterms:modified": "2024-09-30T12:46+09:00",
  "description": "Multiple projectors provided by Sharp NEC Display Solutions, Ltd. are configured with SNMP service enabled by default, therefore can be accessed by specifying SNMP community name \"public\" (CWE-1242 ,CVE-2024-7011).\r\nSNMP service configuration (enable/disable) cannot be changed on the management page of the projectors either.\r\n\r\nThis vulnerability was directly reported to Sharp NEC Display Solutions, Ltd. by the reporter. Sharp NEC Display Solutions, Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN.\r\nReporter: JP Hofmeyr of Southern Metropolitan Cemeteries Trust",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-009396.html",
  "sec:cpe": {
    "#text": "cpe:/a:sharp-nec-displays:multiple_product",
    "@product": "(Multiple Product)",
    "@vendor": "Sharp NEC Display Solutions, Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-009396",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU91077448/index.html",
      "@id": "JVNVU#91077448",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-7011",
      "@id": "CVE-2024-7011",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/1242.html",
      "@id": "CWE-1242",
      "@title": "Inclusion of Undocumented Features or Chicken Bits(CWE-1242)"
    }
  ],
  "title": "SNMP service is enabled by default in Sharp NEC Display Solutions projectors"
}